CVE-2026-59678CWE-863

portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager

High · published July 23, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager.

This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-23T06:48Z
EPSS history
Timeline
  • 23 JUL 06:48Z
    portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager
    cvelistv5